CLAIMS 



1. A method for achieving agreement among n participating network devices to a first 
agree-value (Y) or a second agree-value (N) in an asynchronous network, the agreement 
arising out of a series of messages being sent and received by eacfh participating network 
device, whereby the number t of faulty devices is less than each participating network 
device performing: the following steps: 

a) broadcasting to the participating network devices a pre-vote message comprising a 
pre-vote variable with a first pre-vote value or a second pre-vote value, and comprising a 
first signature proving the pre-vote and a second signature justifying the pre-vote 
variable; 

b) once having received n - t valid of the pre-vote messages with pr^-vote variables from the 
participating network devices, performing a main-vote to obtain a main-vote variable with 
either a first main-vote value, a second main-vote value, or a third main-vote value, 
whereby 

- if all n - / pre-vote variables have the first pre-vote valu^ then the first main-vote 
value is obtained, or 

- if all n - t pre-vote variables have the second pre-votp value then the second 
main-vote value is obtained, or 

- if the n - 1 pre-vote variables are different then the third mairj-vote value is obtained; 

c) broadcasting to the participating network devices a main-vote message comprising the 
obtained main-vote variable, the first signature and the second signature; and 

d) once having received n-t valid of the main-vote messages, performing a decision, 

- if all n - t main-vote variables have the first main-vote v^ilue then deciding for the 
first agree-value or 

- if all n - / main-vote variables have the second main-vote value then deciding for the 
second agree-value, 

thereby having achieved the agreement, and helping the otljer participating network 
devices to decide; otherwise 
a) broadcasting to the participating network devices a share-vafye^^ 5 ^) to generate an 
unpredictable bit € {Y, N}; 

CH919990046 24 



b) receiving at least k share-values (g XA 9 g XB 9 g Xc 9 g XD ) fr° m the participating network 
devices, where k is a number larger than t, assembling out of those a common value and 
deriving one bit thereof ; and 

c) repeating the steps starting from a), whereby 

- if all n - t main-vote variables have the third main-vote value then the binary value is 
used as the pre-vote variable, or 

- if at least one of all n - t main-vote variables has the first main-vote value then the 
first pre-vote value is used as the pre-vote variable, or 

- if at least one of alln-t main-vote variables has the second main-vote value then the 
second pre-vote value is used as the pre-vote variable, 

2. A method for achieving agreement among n participating network devices to a first or second 
agree-value in an asynchronous network, the agreement arising out of a series of messages being 
sent and received with a signature by each participating network device, whereby the number t of 
faulty devices is less than n/3, each participating network device performing the following steps: 

i) broadcasting to all participating network devices a pre-vote value; 

ii) performing a main-vote to amplify majorities if n - t pre-vote values are validly received, 
and broadcasting to all participating network devices-a main-vote value; 

iii) deciding for the first or second agree-value based on the received main-vote values, and 
broadcasting to all participating network devices a share-valu^ to open a cryptographic 
common coin; and 

iv) receiving share-values and assembling out of those a common vafue, uncovering a bit out 
of the common value, and repeating the steps starting from i) using the bit as the pre-vote 
value if the pre-vote values were different. 

3. Method according to claim 1, whereby a transaction identifier TID is used. 

4. Method according to claim 2, whereby a transaqtion identifier TID is used 



5. Method according to claim 1, whereby threshold signatures are applied. 
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6. Method according to claim 2, whereby threshold signatures are applied. 



7. Method according to claim 1, whereby a two threshold coin is used, where t is the maximum 
number of traitors in the asynchronous network and k, with n > k > t, the number of 
participating network devices needed to obtain the two threshold coin. 

8. Method according to claim 2, whereby a two threshold coin is used, where / is the maximum 
number of traitors in the asynchronous network and k, with n > k > t, the number of 
participating network devices needed to obtain the two threshold coin 

9. Method according to claim 1, whereby the number t of faulty deviqes is larger than n/3 if all 
or a part of the faulty devices fail by crashing. 

10. Method according to claim 2, whereby the number t of faulty deviqes is larger than n/3 if all 
or a part of the faulty devices fail by crashing. 

11. Method according to claim 1, whereby / + 1 participating network devices are used as 
asynchronous relay stations. 

12. Method according to claim 2, whereby t + 1 participating network devices are used as 
asynchronous relay stations. 

13. Method according to claim 1, whereby the binary value of the bit is voted by at least one first 
participating network device if none or not all of the share-values^* ^^g^) have been 
received from the other participating network devices. 
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14. Method according to claim 1, whereby at least one first participating network device jumps in 
a present round of vote even if this participating network device is in a round of vote smaller 
in number than the present round of vote. 

15. Method according to claim 1, whereby at least one of the first signature and the second 
signature is replaced by a broadcast primitive which guarantees that all the participating 
network devices receive a sent message or none of them. 

16. Method according to claim 1, whereby several rounds are performed in parallel 

17. Method according to claim 1, whereby the number t of faulty device^ is extended to a set T of 
sets comprising participating network devices. 

18. Method according to claim 17, whereby the participating network dqvises show hybrid failures 
reflecting a different structure of the set Tor different thresholds with / = 1, 2, ... /. 

19. A computer program product comprising program code means for performing the method for 
achieving agreement among n participating network devices to a first agree-value (Y) or a 
second agree-value (N) in an asynchronous network, the agreement prising out of a series of 
messages being sent and received by each participating network device, whereby the number / 
of faulty devices is less than n/3, each participating network devic^ said method comprising 
the steps of: 

(a) broadcasting to the participating network devices a pre-votp message comprising a 
pre-vote variable with a first pre-vote value or a second pre-vote value, and comprising a 
first signature proving the pre-vote and a second signature justifying the pre-vote 
variable; 

(b) once having received n - 1 valid of the pre-vote messages witlj pre-vote variables from 
the participating network devices, performing a main-vote to obtain a main-vote variable 
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with either a first main-vote value, a second main-vote value, or a third main-vote value, 
whereby 

- if all n - t pre-vote variables have the first pre-vote value then the first main-vote 
value is obtained, or 

- if all n - t pre-vote variables have the second pre-votp value then the second 
main-vote value is obtained, or 

- if the n - / pre-vote variables are different then the third maiij-vote value is obtained; 

(c) broadcasting to the participating network devices a main-vote message comprising the 
obtained main-vote variable, the first signature and the second signature; and 

(d) once having received n - 1 valid of the main-vote messages, performing a decision, 

- if all n - t main-vote variables have the first main-vote v^lue then deciding for the 
first agree-value or 

- if all n - t main-vote variables have the second main-vote value then deciding for the 
second agree-value, 

thereby having achieved the agreement, and helping the otfyer participating network 
devices to decide; otherwise 

(e) broadcasting to the participating network devices a share-vajueCg^^) to generate an 
unpredictable bit e {Y, N}; 

(f) receiving at least k share-values (g XA 7 g XB ^g Xc 7 g XD ) from the participating network 
devices, where k is a number larger than assembling out of those a common value and 
deriving one bit thereof ; and 

(g) repeating the steps starting from a), whereby 

- if all n - t main-vote variables have the third main-vote vafye then the binary value is 
used as the pre-vote variable, or 

- if at least one of all n - t main-vote variables has the first main-vote value then the 
first pre-vote value is used as the pre-vote variable, or 

- if at least one of all n - 1 main-vote variables has the second main-vote value then the 
second pre-vote value is used as the pre-vote variable. 
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20. A computer program product comprising program code means stored on a computer-readable 
medium for performing the method for achieving agreement among n participating network 
devices to a first or second agree-value in an asynchronous network, the agreement arising 
out of a series of messages being sent and received with a signature by each participating 
network device, whereby the number t of faulty devices is less than n/3, each participating 
network device, said method comprising the steps of : 

i) broadcasting to all participating network devices a pre-vote value; 

ii) performing a main-vote to amplify majorities if n - t pre-vote values are validly received, 
and broadcasting to all participating network devices a main-vote value; 

iii) deciding for the first or second agree-value based on the received main-vote values, and 
broadcasting to all participating network devices a share-value to open a cryptographic 
common coin; and 

iv) receiving share-values and assembling out of those a common vajue, uncovering a bit out 
of the common value, and repeating the steps starting from i) using the bit as the pre-vote 
value if the pre-vote values were different. 

21. Method for generating an unpredictable bit in an asynchronous network comprising n 
participating network devices (A, B, C, D), each participating netwprk device performing the 
following steps: 

- providing a secret-value (x A , x B , x c , #d) and choosing a compon number (g) from a 
cryptographic group (G) corresponding to a linear secret sharing scheme, 

deriving a share-value (g XA > g XB ,g Xc 7 g XD ) by raising the chosen common number (g) to the 
power of a monotone function / of the secret-value (x A , x B , xc, x D ); 

- broadcasting to the participating network devices (A, B, C, D) the share-value 

- receiving the share-values (g XA ^g XB y g Xc ,g XD ) from the participating; network devices (A, B, 
C, D) and assembling therefrom a common value by combination of at least two of the 
share- values (g XA ,g XB ,g x °,g XD ) in the exponent of the common number (g); and 

- uncovering a binary value of the common value. 
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22. Method according to claim 21, whereby a two threshold coin is used, where t is the maximum 
number of traitors in the asynchronous network and k, with n > k > t, the number of 
participating network devices needed to obtain the two threshold coin. 

23. Method according to claim 21, whereby the received share-valuqs (^^Sg^) from the 
other participating network devices are verified for correctness. 
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